Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Linux » Snort on a hotspot server..

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort on a hotspot server..


Posted by techiem2 on July 31, 2006 11:12:23

We have a box setup with chillispot for use as a hotspot server and we are trying to setup snort on it.
The box has eth0 connected to the main network, eth1(hijacked by tun0 for chillispot) connected to the switch on a vlan for the wireless network, and as of a couple days ago eth2 connected to a port on the switch set to monitor the wireless vlan ports for snort to watch.

The problem is, when eth2 is up on the box so snort can watch (either set to an IP on the subnet to monitor or set to no ip), the linux clients can't connect to the network. They get an IP as usual, but nothing else works, including dns and directly connecting to the box over ssh via IP address (it just says connection refused). Oddly enough, windows still works perfectly.
Taking down the eth2 interface allows linux clients to work again, but then we don't have snort.

Any ideas/suggestions?
site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.